Incorrect CDN certificate error

Domains and Hosting
1

Hello,

After enabling the CDN option on my hosting last week, a certificate error was reported to me on Friday. This URL works fine with the correct certificate (thankfully): https://www.sphere-evenements.com/ but this one shows a non‑private connection (an Http/https certificate issue): https://sphere-evenements.com/

After having created a ticket, I was told that it’s OK on OVH’s side, that the certificate is active on sphere-evenements.com, yet it still does not work.

For your information, Semrush indicates that the certificate is incorrect on the subdomains: hosting.cdn.ovh.net and www.hosting.cdn.ovh.net of my domain: sphere-evenements.com

As if the certificate isn’t active on the CDN servers...

Could you please help me?

Best regards,

Franck

2

Hello @FranckM22

Domains containing “ah non” with hosting should not be used at all.

In your SEMRush configuration, you need to specify your real domain name.

3

Hello @Gaston ,

Thank you for your feedback. The issue is now resolved.

I haven't received any details about the cause of the problem or how it was resolved, but from my point of view, I suspect a caching issue with these URLs. I don't actually use these hostings, yet I kept my domain name; it was Semrush that flagged the problem like this.

image
image1623×393 33.9 KB

Thanks,

Franck

4

I can’t answer: I never use a CDN.

5

Tuesday 9/6 09:33 Belgian/French time: your two sites have a valid certificate
the one with www: certificate issued on April 5
the one without www: cert issued yesterday at 13:24

but you are not passing through the CDN.

6

Thanks, indeed my team reset the certificate yesterday. However, my CDN is enabled on the manager…

7

Then, we can assume that you forced the IP address of your hosting cluster006 (which isn’t the CDN’s)

sphere-evenements.com. IN A 213.186.33.17
www.sphere-evenements.com. IN A 213.186.33.17

Another thing: your SPF authorises only OVH for outgoing e‑mails, but your DMARC requests that reports be sent to Brevo.
There’s an inconsistency there.

sphere-evenements.com. IN TXT "v=spf1 include:mx.ovh.com ~all"
_dmarc.sphere-evenements.com. IN TXT "v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com"